WHAT IS CLAIMED IS: 

1 LA method for obfuscating computer program instructions upon 

2 disassembly, the method comprising 

3 inserting an obfuscating instruction for causing a disassembler to 

4 not disassemble one or more bytes subsequent to the obfuscating instruction; and 

5 inserting a branch instruction to invoke execution of the one or 

6 more bytes subsequent to the obfuscating instruction. 

1 2. The method of claim 1, wherein two or more of the obfuscating 

2 instructions are used adjacently to increase the number of the one or more bytes. 

1 3. The method of claim 1, wherein the obfuscating instruction is an 

2 INT instruction. 



4. The method of claim 3, including the step of 
inserting the following code: 

JMP $+4 

INT 35h 



1 5. The method of claim 1, wherein the steps are performed 

2 manually. 

1 6. The method of claim 1, wherein the steps are performed by a 

2 software process. 

1 7. The method of claim 6, wherein parameters are supplied to the 

2 software process, the method further comprising 

3 supplying a parameter to the software process to specify the 

4 frequency that an obfuscating instruction is to be inserted in a predetermined program. 

1 8. The method of claim 7, wherein the frequency is specified as a 

2 number of instructions of the predetermined program between each insertion of the 

3 obfuscating instruction. 
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1 9. A computer-readable media including the following instructions 

2 executable by a processor: 

3 an obfuscating instruction for causing a disassembler to not 

4 disassemble one or more bytes subsequent to the obfuscating instruction; and 

5 a branch instruction to invoke execution of the one or more bj^es 

6 subsequent to the obfuscating instruction. 

1 10. A computer-readable media including the following 

2 instructions executable by a processor: 

3 JMP $+4 

4 INT 35h 
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1 1 1 . A computer-readable media including the following 

2 instructions executable by a processor: 

3 JMP $+4 

4 INT 35h 

5 INT 20h 



^ I 1 12. An apparatus for obfuscating computer program instructions 

r^'' 2 upon disassembly, the apparatus comprising 

C3 

O 3 an instruction for causing a disassembler to not disassemble one or 

4 more bytes subsequent to the obfuscating instruction; and 

5 a branch instruction to invoke execution of the one or more bytes 

6 subsequent to the obfuscating instruction. 
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